$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa File: dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa (raw, json) Hash identifier: 1VnYgdAhKqstj/CCLX0FRRvZN/yDEw0Uvi3pd6l3W0A= Subject key identifier: 20:B7:49:CC:4C:2A:06:05:7D:BF:0C:AF:8E:D0:E1:8E:57:0C:08:8C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620223AC4A78A3073094E4C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:23:ac:4a:78:a3:07:30:94:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4d57981a-7a59-4e74-b45c-eb433751a515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:00:35:2e:79:cb:3f:12:9e:ba:19:53:e4: da:ac:0f:15:66:de:96:63:43:6c:d6:f0:9d:d7:87: c7:4a:c6:3e:4d:d6:c0:a7:1c:af:ed:70:1b:9f:48: 77:78:d2:af:c0:f6:68:27:bd:99:e9:9b:2c:ef:34: 45:b4:c6:0a:eb:a2:14:c1:7a:75:fe:11:df:8d:d0: ad:5b:6a:15:6b:ab:9f:30:28:3b:ce:cb:a2:dd:5c: 04:3d:61:3a:68:8a:fd:18:63:39:10:d3:93:e3:f8: 44:46:7b:cc:ec:a7:cc:1b:a8:36:10:0a:8a:9a:f7: 1c:ac:6e:2c:c9:8f:8b:4a:39:ef:ef:95:07:cd:5c: ba:10:f2:e3:0e:57:11:14:8f:0c:c5:00:f1:f0:e5: d0:1c:82:ab:dd:78:aa:01:5e:d0:3b:ff:0a:b7:26: 17:61:ca:b6:15:ee:8d:ba:57:de:fd:67:e1:2d:4e: ac:17:96:35:d0:d3:81:56:ab:ef:5e:cd:25:6a:e1: af:8d:ff:5c:b1:d3:b0:f3:e1:d7:16:fe:9a:87:d6: f1:0a:73:07:4e:3c:eb:36:93:fd:de:34:d3:4d:02: 14:42:61:cd:2b:8d:06:77:58:80:49:8f:d3:52:94: 2c:ca:2d:f0:b4:df:9f:0b:91:4d:2b:6f:06:e1:fe: 58:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B7:49:CC:4C:2A:06:05:7D:BF:0C:AF:8E:D0:E1:8E:57:0C:08:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dff99ba8-cb1f-3427-a841-6a1362cd26f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e1:53:ab:c3:0c:3f:7a:0f:06:3e:76:a4:2e:f5:cc:1e:bd: 6d:9b:96:03:81:16:3c:5e:27:09:86:5a:07:bb:b2:9c:34:76: 27:06:5f:7a:6d:97:1f:53:38:48:67:6c:1e:11:b3:f6:6e:c5: 9b:d8:37:56:4a:fc:3d:3f:90:aa:99:3b:0b:cc:af:be:8b:36: 64:19:30:f6:21:7c:b1:11:28:c8:db:8f:28:40:da:80:f8:34: fc:3a:17:0b:c5:89:bd:90:0d:5e:a4:c1:1a:63:76:e9:ef:68: a4:f0:02:f2:f5:c4:14:4b:19:0c:72:a5:d2:c9:02:0a:2f:e0: 5b:e4:79:fa:bb:8d:d7:62:ca:81:e7:fd:24:3a:ee:8e:a7:c4: 62:ac:71:b6:5c:9b:e1:89:ea:40:56:a7:c4:08:ee:cc:a9:6c: 3f:89:bb:a8:cd:38:3b:96:09:3c:69:ee:1d:5f:15:e7:7a:d4: d3:7d:da:67:2f:c5:f2:bc:6a:97:22:2c:c0:04:d6:f9:54:eb: 90:e1:fc:d8:37:c5:d6:8e:45:79:93:f7:7a:6d:8b:0f:70:c1: 49:15:71:a8:fd:1c:78:be:3a:5f:bc:07:1f:7e:69:31:c9:ce: db:ee:f9:4b:f8:58:bb:9e:f3:ae:9e:97:63:6b:80:c7:8c:db: 0a:ca:ab:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiOsSnijBzCU5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGQ1Nzk4MWEtN2E1OS00ZTc0LWI0NWMtZWI0MzM3NTFhNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO4ANS55yz8SnroZU+TarA8VZt6WY0Ns1vCd 14fHSsY+TdbApxyv7XAbn0h3eNKvwPZoJ72Z6Zss7zRFtMYK66IUwXp1/hHfjdCt W2oVa6ufMCg7zsui3VwEPWE6aIr9GGM5ENOT4/hERnvM7KfMG6g2EAqKmvccrG4s yY+LSjnv75UHzVy6EPLjDlcRFI8MxQDx8OXQHIKr3XiqAV7QO/8KtyYXYcq2Fe6N ulfe/WfhLU6sF5Y10NOBVqvvXs0lauGvjf9csdOw8+HXFv6ah9bxCnMHTjzrNpP9 3jTTTQIUQmHNK40Gd1iASY/TUpQsyi3wtN+fC5FNK28G4f5YLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC3ScxMKgYFfb8Mr47Q4Y5XDAiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGZmOTliYTgtY2IxZi0z NDI3LWE4NDEtNmExMzYyY2QyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErhU6vDDD96DwY+dqQu9cwevW2blgOBFjxeJwmGWge7spw0dicGX3pt lx9TOEhnbB4Rs/ZuxZvYN1ZK/D0/kKqZOwvMr76LNmQZMPYhfLERKMjbjyhA2oD4 NPw6FwvFib2QDV6kwRpjdunvaKTwAvL1xBRLGQxypdLJAgov4Fvkefq7jddiyoHn /SQ67o6nxGKscbZcm+GJ6kBWp8QI7sypbD+Ju6jNODuWCTxp7h1fFed61NN92mcv xfK8apciLMAE1vlU65Dh/Ng3xdaORXmT93ptiw9wwUkVcaj9HHi+Ol+8Bx9+aTHJ ztvu+Uv4WLue866el2NrgMeM2wrKqyE= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:17 2025 by rpki-client